$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: +zozbFq3+GspzvwkVCyUfRYkLiF5Hb+tO+v+cIqMDNo= Subject key identifier: 5A:4C:D6:0F:5A:9E:00:05:2D:82:F8:09:FD:75:89:26:78:0E:2F:E7 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0160 Signing time: Sun 11 May 2025 02:52:50 +0000 Manifest this update: Sun 11 May 2025 02:52:50 +0000 Manifest next update: Sun 18 May 2025 02:52:50 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: Aqf5A3xetQT7gYWa6HDuUTiNOiZ+nUzMyBf5seZTHxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: May 11 02:52:50 2025 GMT Not After : May 18 02:52:50 2025 GMT Subject: CN=68201102-5eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:dc:27:25:aa:0d:f4:d6:0d:10:1f:91:a1: da:92:45:c3:fe:d0:59:ac:d4:0f:f4:15:76:28:68: f9:30:11:65:56:43:3b:e1:bd:0f:38:ca:a4:b1:13: 9b:79:27:72:ed:47:be:d4:78:8f:f7:a1:47:ca:61: 12:f8:dc:5a:1a:e9:e8:45:f5:52:6f:8d:1b:e4:22: 03:b3:41:5f:12:48:f6:ed:c3:36:ca:15:ab:ff:e6: 6d:4e:61:d5:d4:a3:be:59:e4:14:a1:3d:d2:d0:24: 1b:78:a5:d8:72:32:96:cc:d9:97:f0:0d:9a:85:cb: 85:75:63:94:f4:58:f2:a0:81:b9:92:6b:dc:c2:81: 60:c8:b3:58:20:fd:9e:f4:95:c8:22:33:93:90:53: 4e:77:89:2d:69:63:82:0a:31:9b:c1:76:20:d2:d1: 56:7d:5a:d8:1f:b4:98:e4:4a:57:5a:09:00:09:14: 32:e4:e8:08:35:db:20:bd:06:4d:bc:79:a4:15:69: cc:71:64:8c:33:0d:f4:fd:63:35:38:b2:ef:da:2e: 32:9d:36:55:32:d2:51:40:ca:99:ea:29:e9:d3:5a: 34:69:cb:6a:61:d1:85:9b:9a:1e:5e:8d:ff:06:fd: 84:fa:df:0e:d6:05:32:1d:c1:58:f8:09:03:8a:18: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:D6:0F:5A:9E:00:05:2D:82:F8:09:FD:75:89:26:78:0E:2F:E7 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a8:39:6f:8d:1c:c0:15:65:88:47:b1:48:aa:99:a0:46:14: 8d:f0:0a:f8:36:ab:91:e7:9d:72:54:cf:ff:18:86:30:95:64: 26:ef:48:e8:8f:49:c7:81:d8:4b:97:2b:73:21:51:d9:6b:ea: 47:65:16:ee:25:77:02:dd:e8:d6:72:ec:fd:58:29:20:d5:6e: 32:90:64:c6:93:f2:41:69:5a:29:b5:09:99:a9:15:a4:53:0e: b8:ec:c0:45:4b:b4:ab:ce:4b:a3:99:95:3d:11:21:d1:10:22: 12:82:c9:a6:b3:cc:66:c1:6f:3a:f3:79:ec:a6:77:b0:6b:51: 2a:d6:57:a7:85:c3:08:45:98:6a:dd:b5:38:b9:c8:38:17:7c: 1a:de:53:22:9e:ca:87:9b:b0:44:c5:79:32:67:02:76:57:ba: 92:c9:4f:3c:4e:0f:8b:8b:b0:90:81:bd:4a:3e:65:b3:d3:74: da:2b:0c:94:6b:74:38:1e:bb:7a:b5:68:1a:3b:de:23:7f:88: e3:32:d0:71:03:02:bb:7f:e3:b9:86:2c:b4:15:c3:23:36:65: 92:af:b1:0e:de:75:ab:cb:29:94:47:51:36:c5:df:f9:2a:91: b7:e9:01:af:1d:f2:81:9b:0c:d1:cf:3f:7f:80:ce:79:e8:69: cc:89:23:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUwNTExMDI1MjUwWhcNMjUwNTE4MDI1MjUwWjAYMRYwFAYD VQQDEw02ODIwMTEwMi01ZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44LcJyWqDfTWDRAfkaHakkXD/tBZrNQP9BV2KGj5MBFlVkM74b0POMqksROb eSdy7Ue+1HiP96FHymES+NxaGunoRfVSb40b5CIDs0FfEkj27cM2yhWr/+ZtTmHV 1KO+WeQUoT3S0CQbeKXYcjKWzNmX8A2ahcuFdWOU9FjyoIG5kmvcwoFgyLNYIP2e 9JXIIjOTkFNOd4ktaWOCCjGbwXYg0tFWfVrYH7SY5EpXWgkACRQy5OgINdsgvQZN vHmkFWnMcWSMMw30/WM1OLLv2i4ynTZVMtJRQMqZ6inp01o0actqYdGFm5oeXo3/ Bv2E+t8O1gUyHcFY+AkDihiefwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpM1g9a ngAFLYL4Cf11iSZ4Di/nMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7qDlvjRzAFWWIR7FIqpmgRhSN8Ar4NquR551yVM//GIYwlWQm70jo j0nHgdhLlytzIVHZa+pHZRbuJXcC3ejWcuz9WCkg1W4ykGTGk/JBaVoptQmZqRWk Uw647MBFS7SrzkujmZU9ESHRECISgsmms8xmwW8683nspnewa1Eq1lenhcMIRZhq 3bU4ucg4F3wa3lMinsqHm7BExXkyZwJ2V7qSyU88Tg+Li7CQgb1KPmWz03TaKwyU a3Q4Hrt6tWgaO94jf4jjMtBxAwK7f+O5hiy0FcMjNmWSr7EO3nWryymUR1E2xd/5 KpG36QGvHfKBmwzRzz9/gM556GnMiSNE -----END CERTIFICATE-----Generated at Sun May 11 10:23:27 2025 by rpki-client